Vulnerabilities

TI-2024-36144 CVE-2024-53985 · GHSA-w8gc-x259-rc7x

Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

MEDIUM 45

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00597 Published 2024-12-02 Partial fix · 1.6.1 CWE-79

TI-2024-36146 CVE-2024-53987 · GHSA-2x5m-9ch4-qgrr

Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

LOW 12

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00446 Published 2024-12-02 Partial fix · 1.6.1 CWE-79

TI-2024-36145 CVE-2024-53986 · GHSA-638j-pmjw-jq48

Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

LOW 13

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00475 Published 2024-12-02 Partial fix · 1.6.1 CWE-79

TI-2024-36147 CVE-2024-53988 · GHSA-cfjx-w229-hgx5

Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

LOW 12

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00447 Published 2024-12-02 Partial fix · 1.6.1 CWE-79

TI-2024-36148 CVE-2024-53989 · GHSA-rxv5-gxqc-xx8g

Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0

LOW 13

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00475 Published 2024-12-02 Partial fix · 1.6.1 CWE-79

TI-2022-07579 CVE-2022-23520 · GHSA-rrfc-7g8p-99q8

rails-html-sanitizer contains an incomplete fix for an XSS vulnerability

LOW 30

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01185 Published 2022-12-14 Partial fix · 1.4.4 CWE-79

TI-2022-07578 CVE-2022-23519 · GHSA-9h9g-93gc-623h

Possible XSS vulnerability with certain configurations of rails-html-sanitizer

LOW 34

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01055 Published 2022-12-14 Partial fix · 1.4.4 CWE-79

TI-2022-07577 CVE-2022-23518 · GHSA-mcvf-2q2m-x72m

Improper neutralization of data URIs allows XSS in rails-html-sanitizer

LOW 29

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00925 Published 2022-12-14 Partial fix · 1.4.4 CWE-79

TI-2022-07576 CVE-2022-23517 · GHSA-5x79-w82f-gw8w

Inefficient Regular Expression Complexity in rails-html-sanitizer

MEDIUM 42

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01578 Published 2022-12-14 Partial fix · 1.4.4 CWE-1333

TI-2022-13919 CVE-2022-32209 · GHSA-pg8v-g4xq-hww9

Cross-site scripting in https://github.com/rails/rails-html-sanitizer

MEDIUM 49

# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Ver…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.26501 Published 2022-06-24 Fixed in 1.4.3 CWE-79

Vulnerabilities

Filters